CVE-2025-13847 PhotoFade <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The PhotoFade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'time' parameter in all versions up to, and including, 0.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-13847

CVE-2025-13847 — PhotoFade (WordPress) Vulnerability type: Stored XSS in the PhotoFade WordPress plugin via the time parameter. Affected versions: all versions up to and including 0.2.1. Root cause: Insufficient input sanitization and output escaping in the time parameter. Impact: Authenticated a...

CVE-2025-1629

A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as problematic. Affected is an unknown function of the component One-Time Password Handler. The manipulation leads to improper restriction of excessive authentication attempts. The vend...

CVE-2025-1235

A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes the date of the switch to be set back to January 1st, 1970...

CVE-2026-0643

creationtimestamp| type| source ---|---|--- 2026-01-07 03:09:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbsijg7eow2q...

Linux Distros Unpatched Vulnerability : CVE-2025-68754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtc: amlogic-a4: fix double free caused by devm The clock obtained via devmclkgetenabled is automatically managed by devres and will be disabled and freed on...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000190 advisory. In PolicyKit aka polkit 0.115, the start time protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly...

Large Language Models for Detecting Cyberattacks on Smart Grid Protective Relays

This paper presents a large language model LLM-based framework for detecting cyberattacks on transformer current differential relays TCDRs, which, if undetected, may trigger false tripping of critical transformers. The proposed approach adapts and fine-tunes compact LLMs such as DistilBERT to...

Tarkov Data Manager SQL注入漏洞

Tarkov Data Manager is a database management tool from The Hideout open source. A SQL injection vulnerability exists in previous versions of Tarkov Data Manager 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, which stems from the presence of blind time-based SQL injection in the webhook editor and...

PT-2026-1608

Name of the Vulnerable Software and Affected Versions PhotoFade plugin for WordPress versions up to and including 0.2.1 Description The PhotoFade plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping related to the tim...

PT-2026-2104

Name of the Vulnerable Software and Affected Versions Tarkov Data Manager versions prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8 Description The Tarkov Data Manager is a tool used to manage Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, a time-based blind S...

PT-2026-2091

Name of the Vulnerable Software and Affected Versions Titra versions 0.99.49 and below Description Titra is open source project time tracking software. Versions 0.99.49 and below have an Improper Access Control issue, allowing users to view and edit other users' time entries in private projects...

CVE-2025-47344 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while handling sensor utility operations...

CVE-2025-47344 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while handling sensor utility operations...

CVE-2025-47332

CVE-2025-47332 corresponds to a memory corruption issue reported in Qualcomm chipsets when processing a configuration call from userspace. Public documents (NVD entry and multiple CVE feeds) assign high impact to confidentiality, integrity, and availability, with a local attack vector and no user...

CVE-2025-47332 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while processing a config call from userspace...

CVE-2025-47332 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while processing a config call from userspace...

CVE-2025-7048

creationtimestamp| type| source ---|---|--- 2026-01-06 20:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrt22qwjy2q...

CVE-2026-21490

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:33+00:00| seen| Telegram/IDZM-U-kLaMeLOHSZRXTD9u0IyoQQmgHJLI16VuZIVt-ROU 2026-01-06 21:17:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrutlf7xj2x...

MAL-2026-97 Malicious code in robustinfer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2fd89ce9f166281f91029df8dc7595d23503a595a4baba85f1702ccf0b4e2b11 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...